ADTRAN AOS Version R10.1.0 Command Reference Manual page 1205

Command Reference Guide
ipv6 firewall check unknown-options
Use the ipv6 firewall check unknown-options command to specify that Internet Protocol version 6 (IPv6)
packets with unknown options in the Destination Options or Hop-by-Hop Options extension headers are
dropped. Use the no form of this command to allow IPv6 packets with unknown options in the extension
header. Variations of this command include:
ipv6 firewall check unknown-options
ipv6 firewall vrf <name> check unknown-options
The AOS IPv6 firewall must be enabled (using the command
for the stateful inspection firewall to be activated.
Syntax Description
vrf <name>
Default Values
By default, this feature is enabled.
Command History
Release 18.1
Usage Examples
The following example specifies that IPv6 packets with unknown option extension headers are dropped on
the default VRF:
(config)#ipv6 firewall check unknown-options
60000CRG0-35E
Optional. Specifies a VPN routing and forwarding (VRF) instance on which
to check IPv6 packets. If no VRF is specified, traffic on the default VRF is
dropped.
Command was introduced.
Copyright © 2012 ADTRAN, Inc.
Global Configuration Mode Command Set
ipv6 firewall on page 1193)
1205